Malicious Word Documents Pretending 'Korea Association for Political and Diplomatic History' and 'Policy Advisory Member Profile' Being Distributed - ASEC BLOG
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001
Show in Graph
Common Information
Type Value
UUID 497a717a-3d4a-4bcc-8224-95520ffbdfdb
Fingerprint b04e31570de503ef
Analysis status DONE
Considered CTI value 0
Text language
Published July 15, 2021, 11 a.m.
Added to db Sept. 11, 2022, 4:59 p.m.
Last updated Dec. 20, 2024, 7:37 p.m.
Headline Malicious Word Documents Pretending ‘Korea Association for Political and Diplomatic History’ and ‘Policy Advisory Member Profile’ Being Distributed
Title Malicious Word Documents Pretending 'Korea Association for Political and Diplomatic History' and 'Policy Advisory Member Profile' Being Distributed - ASEC BLOG
Detected Hints/Tags/Attributes 19/2/20
Source URLs
Redirection Url
Details Source https://asec.ahnlab.com/en/25081/
URL Provider
Details Provider Source level domain
Details ahnlab.com asec.ahnlab.com
Attributes
Details Type #Events CTI Value
Details Domain 202 
asec.ahnlab.com
Details Domain 15 
application.run
Details Domain 5 
ripzi.getenjoyment.net
Details Domain 4 
likel.atwebpages.com
Details Domain 5 
chels.mypressonline.com
Details File 4 
template.docx
Details File 4 
interkoreansummit.dot
Details File 3 
selection.mov
Details File 4 
eh.txt
Details File 2 
c:\windows\temp\dmi5ca06.tmp
Details File 2 
seminarfinal.dot
Details File 5 
ma.txt
Details File 9 
template.doc
Details Url 1 
https://asec.ahnlab.com/en/24443
Details Url 2 
https://asec.ahnlab.com/ko/24649
Details Url 1 
https://asec.ahnlab.com/en/23818
Details Url 2 
http://ripzi.getenjoyment.net/le/eh.txt
Details Url 4 
http://likel.atwebpages.com/bu/ma.txt
Details Url 5 
http://chels.mypressonline.com/package/2006/relationships/interkoreansummit.dotm
Details Url 2 
http://likel.atwebpages.com/officedocument/2006/relationships/attachedtemplate/seminarfinal.dotm